recent DH change does not avoid *all* possible small-subgroup attacks;

let's be clear about that

diff --git a/CHANGES b/CHANGES
index a695a4dc635d5bc4810bca8617f7674fb287d5a9..f0114e66214d2b32d2ef29ee55518b843fe66f1b 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -27,7 +27,7 @@
 
  Changes between 0.9.8 and 0.9.8a  [XX xxx XXXX]
 
-  *) Avoid small subgroup attacks in Diffie-Hellman.
+  *) Avoid some small subgroup attacks in Diffie-Hellman.
      [Nick Mathewson and Ben Laurie]
 
   *) Add functions for well-known primes.